
Search filename

Download

File information

Database statistics

Total:	809,521
Whitelist:	252,181

Top process list

	svchost.exe
	iexplore.exe
	csrss.exe
	rundll32.exe
	lsass.exe
	alg.exe
	wuauclt.exe
	ccapp.exe
	explorer.exe
	ctfmon.exe
	spoolsv.exe
	services.exe
	smss.exe
	jusched.exe
	winlogon.exe
	mdm.exe
	rthdcpl.exe
	hkcmd.exe
	msascui.exe
	alcxmntr.exe

What is Csrss.exe

Client Server Runtime Process - Microsoft� Windows� Operating System - Microsoft Corporation

Run a Free Scan for CSRSS.EXE related errors

File description

Csrss.exe with description Client Server Runtime Process is a process file from company Microsoft Corporation belonging to product Microsoft� Windows� Operating System.
The file is digitally signed from Microsoft Windows - Microsoft Time-Stamp Service
We do not recommend removing digitally signed files from Microsoft Windows

What is csrss.exe?
Csrss.exe is, by Microsoft's definition, the part of the Microsoft Client/Server Runtime Server Subsystem that runs in user mode. It is a critical subsystem that is primarily responsible for managing threads and creating console windows. It also handles any other operations of the Win32 subsystem that are not in kernel mode.

Due to the critical nature of this process, it cannot be stopped from the task manager. The screenshot below illustrates how csrss.exe should appear in the task manager:

Notice that this process always runs as SYSTEM. A csrss.exe process running as a different user may be indicative of malware.

Dangers of csrss
Due to the critical nature of this process and the fact that it runs on all Windows NT-based systems (including Windows 2000, XP, and Vista), it is common for virus writers and spyware vendors to make their malware appear as though it is the real Client/Server Runtime Server Subsystem.

Some of the fake files will have the same name as this process but will be stored somewhere other than in %SystemRoot%\System32. The following malware is known to disguise itself as this process:

Ahlem.A
Netsky.AB
Nimda.E
WinSpy

If you are able to terminate the process from the task manager, the process is not the legitimate csrss.exe. Furthermore, there will never be more than one copy of this process running at a given time.

Common problems

Csrss.exe uses 100% of your CPU when right-clicking on an item

According to Microsoft, this problem is caused by a corrupt user profile. To correct this, back up your documents and then log in as an administrator that is not the user whose profile is corrupt. Right click on My Computer, click Properties, go to the Advanced tab, and click the Settings button under User Profile. Select the offending profile and click Delete.

No Disk Error

While this appears to be caused by csrss, the actual cause may be IOLO System Mechanic. If you have System Mechanic installed, try uninstalling it.

Automatic startup locations

	001 Running Processes
	002 Autorun registry entries local machine
	003 Autorun registry entries Current User
	004 All users startup startmenu
	005 Current user startup startmenu
	010 Installed services
	033 Winlogon Userinit
	034 Winlogon Shell
	035 Active Setup Installed Components
	038 Winlogon Taskman
	065 Image File Execution Options (debugger)
	135 Current User Runonce (+ subkeys)
	139 Windows\load
	163 HKCU Policies\System\Shell
	166 HKCU Policies\Explorer\Run
	167 HKLM Policies\Explorer\Run
	191 Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Run

Digital signatures found for this file

	Signer of certificate	Issuer of certificate
	Microsoft Windows	Microsoft Time-Stamp Service
	Microsoft Windows	Microsoft Timestamping Service
	Microsoft Windows	VeriSign Time Stamping Services Signer
	Microsoft Windows 2000 Publisher	NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
	Microsoft Windows 2000 Publisher	VeriSign Time Stamping Service
	Microsoft Windows 2000 Publisher (Europe)	VeriSign Time Stamping Service
	Microsoft Windows 2000 Publisher (Europe)	VeriSign Time Stamping Service CA SW1
	Microsoft Windows Component Publisher	Microsoft Timestamping Service
	Microsoft Windows Publisher	VeriSign Time Stamping Services Signer
	Microsoft Windows XP Publisher	VeriSign Time Stamping Service
	Microsoft Windows XP Publisher	VeriSign Time Stamping Services Signer
	Microsoft Windows XP Publisher (Europe)	VeriSign Time Stamping Service

MD5 security rating in our database

		177	files (Not yet rated and not signed)
		7	files (Safe and not signed)
		192	files (Safe and digitally signed)

Some versions of this filename have not yet been checked for safety.

Warning: Some malware might rename itself to csrss.exe. Always make sure that your file is from a verified publisher.

Application errors

Fix csrss.exe application error: Run a FREE registry scan

User comments.

	I have Windows 7, and I have 2 of this process runing at the same time. Both seems to be legitimate as both use the lgitimate system file. I don't know if it's some error or it's normal. I think it's normal however as I don't experience problems atm.
	I am running Windows 7 64bit, and I also have 2 csrss.exe process running, and I think its completely normal.

Please add your comments if you have more information about this file or if you know how to solve csrss.exe application errors.

File rating :

Are you human? How much is 6+2:

Browse files by letter

More system processes

csrss_tc.exe	csrss32.exe	csrss5.dll
csrssc.exe	csrssddv.exe	csrsses.exe
csrsss.exe	csrv.exe	css.exe
css_admin.exe	css_drv.sys	css_wizard.exe